Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -9/+11 |
| | |||||
* | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -10/+10 |
| | |||||
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -1/+1 |
| | |||||
* | controller: Optionally adhere to init limits also when initiating IKE_SAs | Tobias Brunner | 2015-08-21 | 1 | -1/+1 |
| | |||||
* | Make sure getpass() is available | Tobias Brunner | 2014-05-29 | 1 | -1/+3 |
| | | | | It's not on Android for example. | ||||
* | ike: Add an additional but separate AEAD proposal to CHILD config | Martin Willi | 2014-05-16 | 1 | -0/+2 |
| | | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless. | ||||
* | ike: Add an additional but separate AEAD proposal to IKE config, if supported | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | |||||
* | enum: Return boolean result for enum_from_name() lookup | Martin Willi | 2014-05-16 | 1 | -3/+2 |
| | | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned. | ||||
* | charon-cmd: Request an IPv6 virtual IP if an IPv6 remote subnet given | Martin Willi | 2014-02-06 | 1 | -4/+23 |
| | |||||
* | charon-cmd: Add --esp/--ah-proposal options to specify CHILD_SA proposals | Martin Willi | 2014-02-06 | 3 | -1/+43 |
| | |||||
* | charon-cmd: Add an --ike-proposal option to specify non-default IKE proposals | Martin Willi | 2014-02-06 | 3 | -1/+34 |
| | |||||
* | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -1/+1 |
| | |||||
* | charon-cmd: support prompting for a PIN | Martin Willi | 2013-09-03 | 1 | -4/+8 |
| | | | | | To support a Password and PIN XAuth combo, additionally support multiple prompts for different credential types. | ||||
* | charon-cmd: add --eap-identity and --xauth-username options | Martin Willi | 2013-07-29 | 3 | -0/+31 |
| | |||||
* | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -0/+5 |
| | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
* | charon-cmd: Shortened and fixed command descriptions | Tobias Brunner | 2013-06-21 | 1 | -2/+2 |
| | |||||
* | charon-cmd: Simplify usage output for authentication profiles | Tobias Brunner | 2013-06-21 | 1 | -11/+3 |
| | | | | The man page describes the min full. | ||||
* | charon-cmd: Add --debug argument to set the default log level | Tobias Brunner | 2013-06-21 | 2 | -0/+3 |
| | |||||
* | charon-cmd: use a copy of pid in initiate callback | Martin Willi | 2013-06-20 | 1 | -6/+7 |
| | | | | | When cancelling a connection that gets established, cmd_connection_t gets freed before terminate() is called. This results in kill()ing invalid PID. | ||||
* | charon-cmd: add IKEv1 aggressive mode profiles | Martin Willi | 2013-06-20 | 3 | -10/+35 |
| | |||||
* | charon-cmd: Add support for PKCS#12 files | Tobias Brunner | 2013-05-08 | 4 | -1/+52 |
| | |||||
* | charon-cmd: match_me/match_other are optional in callback credentials | Tobias Brunner | 2013-05-08 | 1 | -1/+8 |
| | |||||
* | charon-cmd: Request password for private keys | Tobias Brunner | 2013-05-08 | 1 | -0/+3 |
| | |||||
* | charon-cmd: --agent optionally takes the path to an ssh-agent socket | Tobias Brunner | 2013-05-08 | 3 | -16/+24 |
| | | | | If not given it is read from the SSH_AUTH_SOCK environment variable. | ||||
* | charon-cmd: Properly initialize options with no additional lines | Tobias Brunner | 2013-05-07 | 1 | -10/+10 |
| | |||||
* | agent: Use sshkey plugin to parse keys, adds support for ECDSA | Tobias Brunner | 2013-05-07 | 1 | -1/+3 |
| | |||||
* | charon-cmd: Add --agent option to authenticate using ssh-agent(1) | Tobias Brunner | 2013-05-07 | 4 | -0/+72 |
| | | | | | | The socket path is read from the SSH_AUTH_SOCK environment variable. So using this with sudo might require the -E command line (or an appropriate sudoers config) to preserve the environment. | ||||
* | charon-cmd: Use loose matching of gateway identity | Tobias Brunner | 2013-05-07 | 1 | -0/+1 |
| | |||||
* | charon-cmd: add an option to set a different server identity | Martin Willi | 2013-05-06 | 3 | -1/+19 |
| | |||||
* | charon-cmd: add support for different IKEv1/IKEv2 authentication profiles | Martin Willi | 2013-05-06 | 4 | -17/+170 |
| | |||||
* | charon-cmd: support multi-line help text for each option in usage | Martin Willi | 2013-05-06 | 1 | -1/+3 |
| | |||||
* | charon-cmd: add --local/remote-ts options to set traffic selectors | Martin Willi | 2013-05-06 | 3 | -4/+64 |
| | |||||
* | charon-cmd: prompt for EAP passwords on-demand using a callback credential set | Martin Willi | 2013-05-06 | 1 | -0/+49 |
| | |||||
* | charon-cmd: authenticate with EAP if no private key is given | Martin Willi | 2013-05-06 | 1 | -1/+18 |
| | |||||
* | charon-cmd: add support for using dynamic ports in charon-cmd | Martin Willi | 2013-05-06 | 1 | -4/+8 |
| | |||||
* | charon-cmd: load certificates and RSA private keys | Martin Willi | 2013-05-06 | 4 | -0/+178 |
| | |||||
* | charon-cmd: add a connection object and its initiation to charon-cmd | Martin Willi | 2013-05-06 | 4 | -0/+277 |
| | |||||
* | charon-cmd: move command line options to separate file, obsolete short options | Martin Willi | 2013-05-06 | 2 | -0/+86 |